GraphCrawler - The all-in-one GraphQL Security toolkit
An automated security testing toolkit for GraphQL endpoints that discovers, analyzes, and scores vulnerabilities.
What is GraphCrawler - The all-in-one GraphQL Security toolkit?
GraphCrawler is an automated security testing toolkit for GraphQL endpoints. It discovers GraphQL APIs, analyzes their schemas for vulnerabilities like exposed mutations or sensitive queries, and tests authentication requirements. The tool scores findings by criticality and can bypass disabled introspection to reconstruct schemas.
Security researchers, penetration testers, and developers responsible for securing GraphQL APIs who need to automate vulnerability assessment.
Developers choose GraphCrawler because it integrates multiple specialized tools into a single, automated workflow, providing comprehensive security analysis and criticality scoring for GraphQL endpoints, significantly reducing manual testing time.
Overview
GraphQL automated security testing toolkit
Use Cases
Best For
- Automated security assessments of GraphQL APIs in penetration testing engagements
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
